In response to the ngx_http_mp4_module vulnerabilities, we have published a new Nginx package for WordOps based on the latest release 1.22.1.
The package is available for Ubuntu 18.04, 20.04 and 22.04, Debian 10 and 11 as well as Raspbian 10 and 11.

How to update Nginx ?

The safest way to update Nginx is to use the command wo maintenance to update Nginx without any change on Nginx configuration.
You can also use wo stack upgrade --nginx to update Nginx package as well as WordOps Nginx configuration.

If you want to perform Nginx upgrade yourself, you can use the following command :

apt update && apt-get --option=Dpkg::options::=--force-confdef --option=Dpkg::options::=--force-unsafe-io --option=Dpkg::options::=--force-confold --assume-yes --quiet --allow-downgrades dist-upgrade

The post New Nginx package for WordOps – v1.22.1 appeared first on WordOps.

WordOps project is alive for more than 3 years (the first stable release was published in May 2019) and we wanted to share with you some news about the project.

WordOps release cycle

At first, we are going to publish two stable releases every year.
We will publish a stable release in June, and another one in December.
This way, you will not have to ask if the project is abandoned or not, and WordOps will always support the latest Nginx and PHP versions. It doesn't mean we will not publish any other maintenance or stable release apart from these two stable releases. But we understand the difficulty for new users to decide to use WordOps without being sure it's not an abandoned project.

Donations available

As many of you asked us to support donation, it's now available.
You can support WordOps maintainers and hosting costs with a donation.
You can visit our donation page on Ko-fi

The post Some news about WordOps appeared first on WordOps.

We are really happy to publish this new stable release only few weeks after then end of our holidays. We were waiting for MariaDB official APT repository for Ubuntu 22.04 LTS and it's now available. We are still running tests on Debian & Raspbian 11 before adding them to the list of the supported linux distributions.

What's New ?

The main feature of this release is Ubuntu 22.04 LTS support. There is also a new Nginx package, based on the latest stable release (v1.22.0) and MariaDB version bumped to 10.6 LTS.

Changelog

Added

• Ubuntu 22.04 LTS Support

Changed

• New Nginx package based on latest Nginx stable release 1.22.2
• Update Referrer-Policy by @yogeshbeniwal in https://github.com/WordOps/WordOps/pull/434
• MariaDB default version is now 10.6

Fixed

• Fix wo log reset --all by @ihfbib in https://github.com/WordOps/WordOps/pull/438
• fix obsolete warnings logged by @ihfbib in https://github.com/WordOps/WordOps/pull/439
• Netdata stack upgrade(PR #439)

Update steps

To upgrade WordOps, you just have to run wo update.
You can also use the initial install command wget -qO wo wops.cc && sudo bash wo.

To upgrade Nginx package, you can use wo stack upgrade --nginx or the command wo maintenance.
To upgrade MariaDB, you can use wo stack migrate --mariadb.

The post v3.15.0 – WordOps stable release appeared first on WordOps.

We are very happy to announce the availability of a new Nginx package for WordOps built on the latest Nginx stable release (1.20.2).
The package is available for Ubuntu 18.04, 20.04 and 22.04, Debian 9.0, 10 and 11 as well as Raspbian 9.0, 10 and 11.
Debian 11 and Ubuntu 22.04 LTS will be supported with the next WordOps release.

How to update Nginx ?

The safest way to update Nginx is to use the command wo maintenance to update Nginx without any change on Nginx configuration.

If you want to perform Nginx upgrade yourself, you can use the following command :

apt update && apt-get --option=Dpkg::options::=--force-confdef --option=Dpkg::options::=--force-unsafe-io --option=Dpkg::options::=--force-confold --assume-yes --quiet --allow-downgrades dist-upgrade

The post New Nginx package for WordOps appeared first on WordOps.

We are really sorry for the delay about WordOps update and we will try to keep it up to date properly in the future. This is a stable release but we will publish some maintenance release in the next few weeks.

What's New ?

The main feature is PHP 8.0 and PHP 8.1 support. A new Nginx package will be also available soon.

Changelog

Added

• PHP 8.0 and 8.1 support (PR #413)
• Support arm64 architecture (PR #392)

Changed

• Update WP-CLI to v2.6.0 with PHP 8.0/8.1 support
• Update adminer to v4.8.1
• Update Redis repository (PR #377)
• Set PHP 8.0 as default PHP version. Can be changed in /etc/wo/wo.conf

Fixed

• WordOps install script issues
• acme.sh issues with zero-ssl CA

The post v3.14.0 – WordOps stable release appeared first on WordOps.

After two maintenance releases two weeks ago, we have published a new stable release today.

What's New ?

MariaDB 10.5 is now shipped by default with WordOps, and we added the command wo stack migrate --mariadb to upgrade previous MariaDB versions to 10.5.
This command will perform a full backup of your databases before upgrading MariaDB.

We also improved WordOps installation by using a Python virtual environment. It will avoid potential issues with system libraries and isolate WordOps safely.
Nginx cache mapping rules has been improved to cache requests with query strings related to analytics (utm_, fbclid). You will have to run wo stack upgrade --nginx to apply new Nginx configurations.

Changelog

Added

• MariaDB 10.5 support (installed by default)
• Upgrade to MariaDB 10.5 with wo stack migrate --mariadb

Changed

• Improved Nginx caching rules to cache requests with query strings related to analytics (utm_, fbclid)
• WordOps is installed inside a Python virtual environment in /opt/wo to isolate it from the system's Python libraries

Fixed

• Useless php-cli version removal
• Redis 6.0.6 not installed on Ubuntu 20.04 LTS

The post v3.13.0 – WordOps stable release appeared first on WordOps.

After a few quieter months, two WordOps maintenance releases were published this week!

What's New ?

The first maintenance release (v3.12.3) add support for Avif (AV1 Image Format) in addition to WebP with Nginx, and replace Gzip by Zstd (Zstandard) to perform all compression tasks in WordOps (Zstandard provide better compression level with lower compression duration).
If you want to extract as .zst archive, you can use the command zstd -d <your-file>.

Otherwise, the two releases provides several bugfixes listed in the changelog.
To update WordOps, just use the command wo update. Additionally, you will have to run the command wo stack upgrade to update Nginx configuration files.

Changelog

v3.12.4 - 2020-10-14

Changed

• Redis 6.0.6 available on Ubuntu LTS

Fixed

• Avif (AV1 Image Format) & WebP Nginx conditional support(PR #322)
• Sendmail initial configuration with sendmailconfig
• SSL certificates export encoding with utf-8
• Nanorc install on Ubuntu 16.04 LTS

v3.12.3 - 2020-10-13

Added

• Add avif (AV1 Image Format) support into Nginx (PR #314)

Changed

• Use zstd instead of pigz for archive compression
• Exclude Nginx_vts status page from traffic calculation (PR #294)

Fixed

• fail2ban install without Nginx
• Grant MySQL permissions on all MySQL/MariaDB variant (PR #285)
• PHP PECL extensions and PHP 8.0 issues

The post v3.12.4 – New WordOps maintenance release appeared first on WordOps.

After a few quieter months, a new stable WordOps release is available !
We hope you are safe and healthy during these uncertain times.

What’s New ?

The latest Nginx stable release package is now shipped with WordOps (1.18.0), built with the latest OpenSSL release (1.1.1g) and we added support for the brand new Ubuntu LTS (20.04) named Focal Fossa.
The support of Ubuntu 20.04 LTS is still experimental mostly because MariaDB official repository doesn't provide stable packages for this distribution yet.

WordOps default PHP version is now 7.3, and you can now customize this variable in the file /etc/wo/wo.conf.
This release also include several bug fixes, especially for issues related to WordOps install and phpMyAdmin stack install.

Changelog

Added

• Set opcache.preload_user for PHP 7.4
• Link to GitHub changelog after WordOps upgrade
• Automated PHPMyAdmin and Adminer latest release download and install
• Enable Let's Encrypt SSL on sites with http auth (PR #254)
• Ubuntu 20.04 LTS Support (experimental)
• New Nginx 1.18.0 package built with OpenSSL 1.1.1g
• Default PHP version can be set in /etc/wo/wo.conf

Changed

• Improved caching rules (PR #265)
• Default PHP version is now 7.3

Fixed

• MySQL databases backup when using remote MySQL server
• PHPMyAdmin assets missing after installation
• Missing WP-CLI argument when switching site URL to https (PR #257)
• WordOps installation failure with pip
• Installation on raspberry pi 4
• Fail2ban configuration when Nginx is not installed
• Wo-kernel systemd service start failure
• missing letsencrypt settings in wo.conf
• MariaDB issue with innodb_buffer_pool_instances

The post v3.12.0 – New WordOps stable release appeared first on WordOps.

A new stable release is available !

What’s New ?

The main new feature of this release is PHP 7.4 support. You can install PHP 7.4 at anytime with the following command:

wo stack install --php74

Otherwise, you can switch a site to PHP 7.4 by running the command:

wo site update site.tld --php74

As WordOps support three different PHP versions, we have removed the flag --php73=off.
Instead, you can now use --php72, --php73 or --php74 to switch between PHP 7.2, 7.3 and 7.4.

Currently PHP 7.2 is still the default PHP version, but we will switch to PHP 7.3 soon as it's the current stable PHP release.

Changelog

Added

• PHP 7.4 support
• Improved Webp images support with Cloudflare (Issue #95). Nginx will not serve webp images alternative with Cloudflare IP ranges.
• Stack upgrade for adminer
• Check acme.sh installation and setup acme.sh if needed before issuing certificate
• Add --ufw to wo stack status
• Add Nginx directive gzip_static on; to serve precompressed assets with Cache-Enabler or WP-Rocket. (Issue #207)

Changed

• Previous --php73 & --php73=off flags are replaced by --php72, --php73, --php74 to switch site's php version
• phpMyAdmin updated to v4.9.2
• Adminer updated to v4.7.5
• Replace dot and dashes by underscores in database names (Issue #206)
• Increased database name length to 32 characters from domain name + 8 random characters

Fixed

• typo error in motd-news script (Issue #204)
• Install Nginx before ngxblocker
• WordOps install/update script text color
• Issue with MySQL stack on Raspbian 9/10
• Typo error (PR #205)
• php version in wo debug (PR #209)
• SSL certificates expiration display with shared wildcard certificates

The post v3.11.0 – WordOps stable release appeared first on WordOps.

A new stable release has been published few days ago : v3.9.9

What's New ?

Let's Encrypt

In this release, the most important part was refactoring acme.sh integration to make it more modular and to be able to support incoming features.
We added support for another acme challenge : DNS Alias. It's pretty similar to DNS API, and it provide the ability to use a domain with DNS API to secure another one. You can read more about this feature in acme.sh wiki.

In WordOps, you can use DNS Alias mode this way :

wo site update site.tld -le --dns=dns_cf --dnsalias=aliasdomain.tld

We also improve error log in case of failure during certificate issuance and DNS check to make sure the domain is pointing to the server IP.

Security

To harden server security, we previously added UFW setup in our install script. It's now available with the command wo stack install --ufw and has been removed from the install script.

We also added two flags to the command wo secure :
- --ssh : harden ssh security with a sshd_config template following the Mozilla Infosec guidelines
- --sshport : update SSH port to any custom port

Changelog

Added

• [STACK] UFW now available as a stack with flag --ufw
• [SECURE] wo secure --ssh to harden ssh security
• [SECURE] wo secure --sshport to change ssh port
• [SITE] check domain DNS records before issuing a new certificate without DNS API
• [STACK] Acme challenge with DNS Alias mode --dnsalias=aliasdomain.tld acme.sh wiki

Changed

• [APP] WordOps dashboard updated to v1.2, shipped as a html file, it can be used without PHP stack
• [STACK] Refactor Let's Encrypt with acme.sh
• [STACK] Log error improved with acme.sh depending on the acme challenge (DNS API or Webroot)
• [INSTALL] Removed UFW setup from install script
• [APP] phpMyAdmin updated to v4.9.1
• [STACK] Commit possible Nginx configuration changes into Git before and after performing tasks (in wo secure for example)
• [CORE] Update deprecated handlers and hooks registration

Fixed

• [STACK] wo stack purge --all failure if mysql isn't installed
• [INSTALL] Fix EEv3 files cleanup
• [SECURE] Incorrect variable usage in wo secure --port
• [INSTALL] Fix backup_ee function in install script

The post v3.9.9 – WordOps stable release appeared first on WordOps.